Vulnerabilities

TI-2026-82207 CVE-2026-118666 · GHSA-mp66-8ww2-pcwm

GraphQL Tools legacy WebSocket executor misroutes subscription data

HIGH 66

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00335 Published 2026-10-28 Fixed in 9.0.36, 1.1.36 CWE-200

TI-2026-82206 CVE-2026-118665 · GHSA-434m-5hcj-pxf3

HIGH 69

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00388 Published 2026-10-28 Fixed in 9.0.36, 1.1.36 CWE-613

TI-2026-65765 CVE-2026-103921 · GHSA-6fw5-9hq8-w87g

LOW 34

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00274 Published 2026-10-01 Fixed in 1.1.35 CWE-295